2965277 matches found
Apache Pinot < 1.3.0 - Authentication Bypass
This vulnerability allows remote attackers to bypass authentication on affected installations of Apache Pinot. Authentication is not required to exploit this vulnerability.The specific flaw exists within the AuthenticationFilter class. The issue results from insufficient neutralization of special...
Anyscale Ray - Remote Code Execution
Anyscale Ray 2.6.3 and 2.8.0 contain a remote code execution vulnerability due to insecure job submission API, allowing attackers to execute arbitrary code remotely if they have network access to the Ray Dashboard API. id: CVE-2023-48022 info: name: Anyscale Ray - Remote Code Execution author:...
Adobe Coldfusion - Cross-Site Scripting
Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within th...
SonicWall GMS and Analytics - SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics:...
Juniper J-Web - Remote Code Execution
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...
Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting
Grafana is an open-source platform for monitoring and observability. In affected versions if an attacker is able to convince a victim to visit a URL referencing a vulnerable page, arbitrary JavaScript content may be executed within the context of the victim's browser. The user visiting the...
php-vulnerability-checker-october-2026
PHP Vulnerability Checker October 2026 PHP Vulnerability Chec...
CVE-2026-112326
GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with read-only permissions to permanently delete existing vulnerability records due to...
CLEANSTART-2026-QO13189 In Bouncy Castle for Java before 1
Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-YZ86171 In Bouncy Castle for Java before 1
Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-ZX80085 In Bouncy Castle for Java before 1
Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-DA66698 In Bouncy Castle for Java before 1
Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-WJ50656 In Bouncy Castle for Java before 1
Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-CE73724 In Bouncy Castle for Java before 1
Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-DK36206 In Bouncy Castle for Java before 1
Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-JL85698 In Bouncy Castle for Java before 1
Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-MT03489 In Bouncy Castle for Java before 1
Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-BK39147 In Bouncy Castle for Java before 1
Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...